Critical Condition
Premium roomTHM Security Services has been engaged for a Detection Engineering activity for Cedar Hollow Health Network.
medium
To access material, start machines and answer questions login.
Another silent incident with no detections firing.
You have been brought on at Security Services (TSS). Click the card below to reveal your role on this case.
Your case briefing is waiting in the TSS Operations Hub. Head to the Active Case tab for everything you need before you begin. The other tabs are there if you want to explore the company, the team, or previous cases.
Prerequisites
- Sigma Language room or proficiency in Sigma rules.
- : Exploring room or being comfortable writing and reading SPL queries.
- & Automation in Detection Engineering room or familiarity with the Detection-as-Code concept.
Answer the questions below
I have reviewed the case briefing and am ready to begin the investigation.
Ready to learn Cyber Security?
The Critical Condition room is only available for Premium or Max subscribers. Signup now to access more than 500 free rooms and learn cyber security through a fun, interactive learning environment.
Already have an account? Log in